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B.S All right. So we can go on the record. 


This is an interview of John Donohue conducted by the House Select Committee to 
Investigate the January 6th Attack on the United States Capitol pursuant to House 
resolution 503. 

Mr. Donohue, could you please state your full name and spell your last name for 
the record? 

Mr. Donohue. Absolutely. — It's John Kelly Donohue, D-o-n-o-h-u-e. 

EE. introduce everyone on our side in the virtual room today for 
the record. Present is Researcher i, Investigative Counse | I 
Professional Staff Member EEE, and Senior Investigative Counsel! 
He. | believe | have everybody on our side other than administrative folks. 

If you can -- 

Mr. Franz. — | think -- 

Ys. 

Mr. Franz. At the beginning | think | heard it say that the meeting is being 
recorded. Can we address that? 

i > i Sure. Is that -- was that the court reporter who did that? 

The Reporter. No. 

P| No, that was me, ie = Brel I'm monitoring, and | was told to 
record. 

Renee Okay. Wedon't have to record. This interview doesn't need to 


be recorded other than -- 


Sit was a request by p | 
a ° 
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MR. f that's okay. | think that's -- is that what you said? 
ME. Ses. So Samantha said that all Tis moving forward will be 


recorded at the request of J unless we're told otherwise, so -- 

HE. 2 Okay. So that is our -- obviously our chief investigative counsel, 
Mr. Donohue and Mr. Franz. Is that allright? Is that -- do you have -- do you take 
issue with our recording? 

Mr. Franz. Well, to whom might this recording be distributed? Is this part of 
the public record? 

BE. it's my understanding that, no, that it won't be released. The 
transcription itself, | know -- everything -- everything is staying in -- within the committee. 
Obviously, we're going to potentially quote from the transcription in a given report, ina 
final report. But as far as the recording, that -- my understanding is absolutely no, that 
that stays with us. 

Mr. Franz. Okay. 

B.A right? 

Mr. Franz. If that changes, | just want to have notice of it, okay? 

A. Of course. Ofcourse. We will inform you for whatever reason 
that that's not our policy moving forward, but that is my understanding right now. 

Mr. Franz. Okay. 
SP erfect. 
| want to acknowledge for the record, Congressman Schiff has joined the 
conversation. 
Mr. Guha. [EB | apologize. It's Samidh. If you can just give me 2 seconds, 

let me just call Eric really quickly. — It'll literally take 2 seconds. 


HSCs Sure, of course. Noproblem. Wecan go offthe record. No 
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problem. 
[Discussion off the record. ] 


PY We can go back on the record. 


Mr. Franz. Hey. 

as. i. 

Mr. Franz. So can you guys hear me? 

M2). 

Mr. Franz. I'm sorry, but, you know, | reached out last week to find out if this 
was going to be recorded. | | understand how they shifted the goal post on you, 
but he can't sit for a video recorded interview today. He's not dressed appropriately. 
There's no telling how this gets out into the public. The manisamanof honor. If he's 
going to be recorded, he's going to be dressed appropriately to speak of his position and 
also as a proper representative. So -- 

sue. 

Mr. Franz. -- if we can have him come back another time. 

SC totally understand that. | think we can stop the recording. 
I'm going to ask MM to stop the video recording, and let's proceed on the transcript 
alone. Okay? 

Mr. Franz. I'msorry. Say that again? 

a. | think we can proceed on a transcript alone and we don't need 
to video record. | totally understand your concern. 

Mr. Franz. So can we make -- can we have assurances that it's not being 


recorded? 


——— 51 Yes. | just stopped the recording. 
ME 042y, great 
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Mr. Franz. Okay. 
Shanks. Let's proceed. 
Mr. Guha. Hey, guys, thanks for being -- thanks for being understanding. 
Mr. Franz. Thank you. 
Mr. Guha. Appreciate it. 
All righty. So, let's see, let's just do a quick sound check. 
Mr. Donohue, can you speak? 
Mr. Donohue. 100 percent. How about everybody else? 
ct me make sure the court reporter is ready to go? 
The Reporter. I'm ready, and | can hear everyone. 
FY Allright. And would you like me to just start where | left off -- 
Mr. Donohue. That'd be fine. 
BS —- the court reporter? 
The Reporter. Yes. 
(| Okay. § Sol'd ask now that your counsel introduce themselves for 
the record, Mr. Donohue. 
Mr. Donohue. Sure. 
Mr. Franz. Sure. Eric Franz, F-r-a-n-z, joined by Samidh Guha. 
Mr. Guha. — Eric, I'm not going to put you on the spot. It's S-a-m-i-d-h, and the 
last name is G-u-h-a. 
3) And | think we have also -- 
Mr. Franz. Lisa Walters. 
BE Ce had. =| don't see her on the call anymore. So if she signs 
back on, I'll make sure for the record to have her identify -- 


Ms. Walters. I'm here. 
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5. Oh, okay. I didn't see you. Oh, okay. Could you identify 


yourself for the record? 

Ms. Walters. Sure. Lisa Walters, senior counsel, Office of the General Counsel 
for United States Capitol Police. 

| Okay. Thank you. 

This will be a staff-led interview, and members, of course, may choose to also ask 
questions, if any join the call. My name is EE, and |'m an investigative 
counsel for the select committee. 

Before we begin, I'd like to describe a few ground rules. There is an official 
reporter transcribing the record of this interview. Please wait until each question is 
completed before you begin your response, and we will try to wait until your response is 
complete before we ask our next question. 

The stenographer cannot record nonverbal responses such as shaking your head, 
so it is important that you answer each question with an audible, verbal response. We 
ask that you provide complete answers based on your best recollection. If the question 
is not clear, please ask for clarification. If you do not know the answer, please simply 
Say SO. 

| also want to remind you, as we do with all witnesses, that it is unlawful to 
deliberately provide false information to Congress. Once the transcript is complete, you 
will have an opportunity, you and your counsel, to review it. 

EXAMINATION 
CY 

Q May you briefly describe your professional background experience leading 

up to your time with Capitol Police. 


A Yes, sir. So, thanks, everybody, for joining the call today. My professional 
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background, right after college, at the age of 22, | joined the New York City Police 
Department. Spent 32 years in the New York City Police Department, held every rank 
from cadet through chief. | -- along the way, | picked up an MBA and a law degree. I'm 
an admitted attorney in New York State. 

In -- during my time, | professionally worked in plainclothes units in narcotics, in 
administrative commands, as well as on patrol and police car, and spent time in 
intelligence, in the NYPD, having spent time as -- in developing our policies and 
developing our international liaison program and building out our intelligence analysis 
capabilities, both for the criminal side and counterterrorism side, and also started our 
cyber intelligence -- enhanced our cyber intelligence capacities at the NYPD through 
Federal grants. 

So then kind of synthesized a lot of technology and law enforcement in my final 
position, which was chief strategy officer at chief strategic initiatives for the NYPD, and 
retired in March, February 29th of 2020, and went into private industry and worked with 
a non-for-profit, and joined the Capitol Police in the middle of November of 2020. 

Q  Doyou currently work, Mr. Donohue? 

A Yes. lama senior fellow at Rutgers University Center on Policing, and I'm 
also a COO of a small non-for-profit. 

Q- Andincase the record didn't catch it before, | just want to, again, 
acknowledge that Congressman Adam Schiff is present for the conversation. He will, if 
he has any questions, certainly interject. 

The -- so you mentioned joining Capitol Police in November of 2020. Is that 
right? 

A __ That is correct. 


Q What was your role? 
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A | was hired as the director of a new position, as director of the Intelligence 
and Interagency Coordination Division. 

Q_ And for the record, we may be referring to it as IICD moving forward. 

When did you leave your post there? 

A | resigned in middle of April, end of April of 2021. 

Q Did you know beforehand that they had created the position of an assistant 
director and hired Julie Farnam shortly before if not largely at the same time as your 
hiring? 

A _ That is correct. 

Q Okay. And what was your understanding of why they did that, why they 
created another role, a second role within IICD? 

A It was to -- well, what | was told is they had two very strong qualified 
candidates, and that, you know, bringing us both on was within the capabilities, | guess, 
of the ability to hire up in that position, so they took the opportunity to do so. 

Q- And what was your understanding of why you were brought on? So was it 
just the retirement of Norm Grahe, the previous head of the division, or was there a 
particular mission or goal that your hiring sought to accomplish? 

A As | understood it, there were significant challenges that IICD, or its 
predecessor unit IAD, it had gone through a couple of iterations, that the Capitol Police 
Board, the Capitol Police leadership, Capitol Police Board realized that they needed to do 
something to kind of move the organization's intelligence capacities into a better mindset 
and a -- and achieve a cultural change, recognizing that it was not focused on kind of what 
they believe were current threat streams. And that's what persuaded the Capitol Police 
Board to ask for the position to enhance the USCP's capabilities in intelligence, in law 


enforcement intelligence. 
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Q What did you think of the state of IICD when you joined in late 2020? 

A So when | joined, one of the first things that | tried to do was to get a close 
assessment of both the people, processes, policies, technology, training, kind of that 
wraparound approach to see where we had vulnerabilities, gaps, and to see what would 
be a roadmap to advance kind of the current state into something that would be in 
alignment with what the stated goals were, which was to professionalize and kind of 
move the intelligence-gathering capacities and improve them for the Capitol Police. So 
doing that first-level assessment was one of the things that was going to be very 
important for us. 

Q And how did you assess its ability to do all of that? Was it working 
adequately, in your mind? 

A So | would say that the -- there was significant deficiencies, but | would 
say -- | would qualify that, because there was some very initial observations that -- which 
we had. It was in the middle of COVID, but virtually the entire team of 12 people were 
working remotely, very strange for people that have the -- had a SCIF where there was 
actually a lot of distance between people. 

So we started going down that road of interviewing our own personnel but trying 
to assess what their capabilities were and moving in the direction of bringing people back 
into the office so that we could start functioning like a -- like an intelligence shop does. 

Also saw that there were some limitations with some of the technologies that we 
had had. Very recently, the Department had acquired some social media monitoring 
tools, but they were -- they were -- paled in comparison to what they had had in the past, 
but those are for other technical reasons they had to make some changes. 

So there were -- there were -- there were those challenges at the very outset. So 


working remotely, you know, the technology, assessing what individual skill sets existed, 
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including what sort of training they had were all on our roadmap to try and 
professionalize what the organization needed to go forward. 

Q And |think you've in the past talked about sort of there was a discrete focus 
on external -- on the external terrorism world. Can you -- 

A So -- 

Q_ -- break that down for me? 

A Yes. When the intelligence capacities were developed for the USCP -- and | 
want to preface this, because the conversation that | had with the predecessor, who was 
a -- who was not the director, it was not a directorship position within USCP, before me, 
Mr. Grahe, was a former military man, military intelligence. And he -- his -- his personal 
kind of experience, as he shared with me in the 1 hour kind of handoff that he gave to me 
when he came to visit on his very last day, said his mindset was, you know, kind of his 
military mindset, which was military intelligence and was informed very strongly in the 
post-9/11 world. 

So the external focus, kind of that external terrorism focus, was -- was of a very 
high level for the people that were brought in. In addition to him saying that, my 
observations were a lot of the skill sets for people that were on our team were either 
from the military and military mindsets that had an external view. 

Q_ Anddid you think that that needed to be broadened for -- or what was your 
view of the fact that that was the focus? 

A There were other focuses, obviously. So think it'd be good to kind of 
break down kind of the work that the team was responsible for. So they were, you 
know, responsible for conducting open-source investigations on threats that are received 
by Members of Congress, and that required some skills to do both the analysis and kind of 


poking around at various platforms to see what could be found to help support the 
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investigating agents to chase down those threats. 

There were those who were privy to kind of the secret materials that were in the 
SCIF and, you know, trying to see what had an effect on either our protectees, so there 
was, you know, kind of a protective intelligence capacities, investigative capacities. 

There was the support that IICD, the analysts gave to the special events when they were 
assessing what a organization would -- when they were trying to protest what was being 
said out loud or, you know, what their -- if there was a potential for arrests or something 
that would be important for operational personnel, and then there was a liaison focus 
too. 

But overarching, and | think this gets to the final answer of the question, 
was -- the overarching focus was external kind of threats, at the external threat 
environment. Although, we saw the lead-up to -- | saw and listened to my bosses and 
colleagues, that the threat environment on -- in the online space had been growing 
exponentially against Members of Congress. 

Q__Inthat same vein, on July 16th, your appearance before U.S. House 
Subcommittee on Intelligence and Counterterrorism got some media attention. And the 
media characterized it as sort of you warning Congress, in July of 2020, of rightwing 
attacks of domestic -- the concern over domestic actors. The quoteis: The 
intersection of constitutional rights and legitimate law enforcement has never been more 
at risk by domestic actors as it is now as seditionists actively promote a revolution. 

Can you just talk to me about your testimony that 6 months before January 6th? 
Was it on your mind as you were the -- shortly thereafter hired as the director of IICD? 
Was it on the mind of your colleagues or potentially the people who hired you when they 
selected you for that post? 


A | certainly let everyone know when | was being hired that | had testified 
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before Congress at the request of, | think in that particular instance, Congress Member 
Max Rose. Solstand by those comments. You know, they were -- that was sworn 
testimony before Congress. 

The issues about extremism and accelerationism were clearly front and center on 
my mind and were clear -- in my mind and | believe as | had shared conversations with my 
colleagues, that it was on our minds collectively. 

Q When you arrived at IICD, was it mainly an intelligence-gathering operation, 
an intelligence-sharing operation, or an intelligence-consuming operation? It can, of 
course, be none or all three, whatever is consistent with what you saw, of course. 

A | would say that [inaudible] -- 

QIcan'thear you. Are you speaking? 

A -- primarily consumers of information, and that's because of the -- kind of 
the skill sets and the obligations of the organization. | would not say that we were a 
intelligence-sharing operation primarily because of capacity. And when | say capacity, 
it's the ability to produce products that others would find useful and worthy of 
consuming, right? So I'd say we were largely on the receiving end, the USCP was on the 
receiving end of information as it was coming from partner agencies. 

Q Is that how you wanted IICD to operate, or was the change in that, in that 
focus, in either sharing more, in gathering more, what have you, was that one of your 
goals? 

A So, ideally, we were move -- we would be moving towards a largely 
self-sustaining professional intelligence shop. And what does that mean? Moving 
from one where primarily people are listening to what is being said and trying to make 
sense of it to where we were collecting, and being able to understand our operating 


environment through the data that we collected or information that we were observing 
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independently, and then ideally being able to produce products that the rest of law 
enforcement would seem -- would believe were worthy of consuming. 

So that was the -- that kind of audacious goal is to make us a contributor to the 
intelligence community, the law enforcement intelligence community. Yeah. 

Q Were there any changes instituted by you or Ms. Farnam upon arriving at 
ICD? If there were, what were they? What were the purposes behind the changes? 

A So there was -- obviously you can't walk in and kind of rip down every wall of 
astructure. There is a learning curve, obviously, when you're coming into a new 
organization to try and get our handle around who was working in our team and their 
capabilities. 

We -- we deliberately tasked people outside of their comfort zones to produce 
different types of reports or to engage in different type of analyses or to leverage some of 
the technologies that they may not have been comfortable with for people to get a sense 
of -- for us to be able to get a sense of how people were capable or not, as well as kind of 
having them -- you know, being able to assess what their analytic skills are as well as their 
writing skills, and to see whether they would fall into -- you know, what sort of projects 
would be -- have them capable. 

We also saw some redundancies. _ | think there was one report that we 
had -- that we had stopped producing. There was a lot of kind of one-offs. And there 
was also a lot of -- | wouldn't say alot. There were also some people of IICD who were, 
while working remotely in different places, had a lot more latitude in producing products. 

So it wasn't -- so we took those, as any management should, kind of get a sense of 
who's got what capabilities, tasking people to push them beyond where they have, and 
we also assessed what their training was. 


Q_ These changes, how were they received by your team? 
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A I'd say, by some members were appreciative of having the opportunity to try 
something new. There were others who were less so. 

Q So, you know, you talked a little bit about putting analysts out of their 
comfort zone. What say you to the idea that analysts may have been removed from 
their specialization, you know, in an attempt | think to make them more generalist? So 
as in, was there a team specializing in open-source searching that was disbanded, or an 
analyst such as Deborah McLellan (ph) previously focusing on demonstrations taken off 
that specialization? And what would you say about that, what the wisdom behind those 
moves was? 

A | would -- 

Mr. Franz. Hold on one second. 

[Discussion off the record.] 

Mr. Donohue. In making the decisions to see who has what capabilities and who 
can adapt to the change that the organization had tasked me with, yes, there were some 
decisions that were made to take people off of certain projects and to see whether they 
had skill sets in other places. 

oy 

Q You mention that part of the team was pleased, part of the team was not. 
Did that lead to any either sort of dysfunction or resentment between members of the 
ICD that were either significant or ultimately affected the work environment there? 
What would you say to that? 

A So | don't want to speculate what some people may have thought. I've 
been in conversations with some members of the team, they were very happy that they 
were finally being given guidance and others who were very comfortable in working 


remotely and having their way of doing things that was set in stone. 
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And | started by saying that there was a very small shop that was not working as 
efficiently and certainly hadn't been in an office to share information with their 
colleagues in a year -- well, 11 months or so. And that becomes complicated in an 
intelligence organization where sharing is incredibly important, especially with such a 
small team. 

Q- And |think, correct me if I'm wrong, would you use the phrase that it was 
a -- in your mind, not a high-performing team at the time that you joined? 

A __ That is correct. 

Q Okay. 

A And1I would use that word. 

Q  Andso-- 

A It was not a high-performing team. 

Q So what | want to try to get an idea of is, by the time we hit January 6th, | 
understand you're in the role maybe, what, 60, 70 days by that point. There are 
changes that you've lined out for us that you attempted to make. There were goals that 
you were trying to move toward, and it sounds as though there were some also -- maybe 
some personnel conflicts, some unhappiness in the team by some analysts. 

These issues that were plaguing the IICD, both structurally, as you mentioned, and 
all the way down to interpersonal, were they still present by the time January 6th 
occurred? Sol'm trying to get a feel for, does January 6th happen in the midst of a 
lot -- you know, of trying to make change but not completely having successfully moved 
ICD to where it needed to be in your mind? 

A Change and strategic change takes time. It takes -- as | said, that cultural 
mindset needed to shift. That cannot happenin 5Odays. Actually, | think it was 


exactly 54 days when January 6th happened in my time there. And having been the 
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chief strategist for the New York City Police Department in an organization that is very big 
and has very strong culture, | could also see that there was very strong grounding for 
some of the people that were in the unit. 

| am -- it is clear that things needed to change because the threat dynamic that 
the organization was focused on had pivoted so dramatically in a very short period of 
time but hadn't wrapped itself around it. 

Q  Canyou go into that for me? What do you mean by that? 

A I'm referring to -- | would refer back to my testimony on July 16th, and the 
experiences that | shared with Norm Grahe when he was walking out the door and 
understanding what his cultural mindset was. 

Q_ Got it. 

A So understanding how the world had changed. 

Q = Socould you then break down for me why you think that the organization 
hadn't moved fully to where you needed it to be in terms of seeing the threat from 
domestic rightwing extremist groups? 

A | -- let me think about that for a second. 

Q Ofcourse. No problem. 

[Pause. ] 

A | would say, change doesn't happen overnight, and leading the team towards 
what that ultimate goal would be had to take time. And | want to stress, you know, 
when you think about the amount of time that | had there, literally 50 days, exclusive of 
three Federal holidays and the swearing in of a new Congress, which | think, you know, 
are all kind of in that context. 

| also think it's -- you know, in recognizing that no organization, particularly one as 


dynamic and important as the Capitol Police, can change that quickly, but we -- we did. 
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It -- it is, and while | was there, a work in progress. 

Q_ Is there anything else other than, you know, and you've talked a little bit 
about it, the focus, trying to shift the focus, based on your testimony in July, is there 
anything else that you think, given its issues, either in, you know, doing more than just 
consuming intelligence, the training issues, the, you know -- its products not being 
accepted or not being well reputed outside the organization, any of those things that you 
feel by the time January 6th happened that it affected, it affected the planning, the 
preparation for January 6th because the IICD had not, as you mentioned, in 50 days 
gotten to where you think it ought to be? 

A My first day there isn't the point in time that -- where sea change could be 
measured from, right. | think you point to a number of different things that had to 
happen from day one when | was there and when the organization, when USCP realized 
they needed to professionalize and change their focus. But | think it would be -- | think 
it would be impossible to draw a direct correlation between capabilities that did not exist 
in the IICD or in the Capitol Police to the events of the 6th. 

Q___sDid you feel the timing was unfortunate, you know, given that this is an 
organization or division that is, you know, trying to get its sea legs, and that for an event 
like this, obviously an unprecedented event like this to have occurred so early in that 
process of trying to improve? 

A | would say, of course. You know, timing is just about everything. But | 
would caution that, you know, if other people had taken it, it doesn't -- you know, it 
doesn't matter. There still would've been that roadmap to try and get them to a place 
where there were adequately trained personnel, adequate number of personnel, 
adequate technologies, and a environment where intelligence consumption 


and -- is -- production and consumption are harmonized. And it was -- that was not 
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a -- you know, exclusively an intelligence function. There's the production and then 
there's the consumption. 

Q Inthe lead-up to January 6th, how would you characterize the influence IICD 
and intelligence more broadly had on the operational side of the department? 

A | can say we gave at least two briefings with operational leaders there. | 
would leave it to them to -- to -- | wouldn't want to speculate what they're saying. But | 
would say, knowing that the reputation of IICD prior to both myself and Julie's hiring had 
been solo, that there still was no time for others to understand what we were providing 
them, and | think that may have had some implications on how people consumed or their 
willingness to consume what they were hearing. 

Q_ Are phrases -- you know, is it fair to say IICD was considered a joke within 
the department? 

A | wouldn't have taken a job if it was ajoke. What | would say is that it had 
its challenges and they were significant, given the people, the technology, the lack of 
training, and the mindset within IICD. | can say that | heard other people refer to it asa 
joke. 

Q _Isit fair to say that they were somewhat siloed by IICD from the rest of the 
department? And, if so, speak to me about that. 

A They were. _IICD's -- the head of IICD worked in the SCIF, in a room off from 
the main part of the SCIF. Another sub unit worked on the second floor, when they 
were there. Obviously, they had left middle of March at the start of COVID. So the 
physical separation, the isolation of the person who formally ran the organization were 
things that | think contributed to the stovepiping of that environment. 

There were individuals when we were there would say that they knew an analyst 


and they would always go to the same analyst because they were competent enough to 
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assist them in, you know, doing some sort of research. So they were -- there were 
workarounds to get to competent people who were in IICD that could help, investigators, 
for example. But one of those substantive yet symbolic changes was to put me in the 
middle of the investigative floor, and Julie, you know, in offices where anybody could 
come and see us at anytime. 

Additionally, | gave my phone number out to anybody who wanted it. The idea 
of intelligence is to both share it and to collect it but to also to do it in a way that's 
consumer -- consumer focused, and that's what was happening with us, making products 
readable and meaningful to those who would consume. 

And | use an example of formats for how we would produce reports, you know, 
check the boxes or use formatting -- a form when you're going through, say, an 
investigation, which is one of the improvements that were put in place, and formats for 
some of the reports that -- the consumables that we were putting out for people pre and 
post 6th. 

Q You've talked before about not being sure that, you know, folks on either the 
leadership or the operational side of the department were sophisticated consumers of 
intelligence and that that might have been an impediment. Can you talk me through 
that, please? 

A Yeah. And it's a little bit in what | would say is -- when | say consumers, 
there is a -- there should be an interaction. There should be a sharing of information, 
how an analyst honestly perceives and how they've constructed what their assessment is 
with a -- with the people who would make decisions based on that. And sharing an 
assessment or observations should help frame some of the questions that a sophisticated 
consumer or one who has been receiving better prepared intelligence would react to. 


And some of the ways that that grows are examples that I've had when | was 
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working in intelligence in the New York City Police Department, where you would collect 
information on -- you know, open-source information on an event and share that with 
peers that would make decisions and then share that information with their subordinate 
commands. 

But you would say, you know, there's an event. We see an event that's 
happening, it happened last year, same time, only this year we see there's a lot more 
people and there's an opposing group that's going to show up. Sharing that 
information, say, oh, okay, someone who is not sophisticated in consuming would say, oh, 
| understand. So there's maybe counter-protesters. 

A follow-on question would be, what are they saying? What are they -- what is 
motivating them? How many would there be? Do we see that other counter-protest 
group acting in other ways in other places? What else have we seen? And drawing 
analogies so that your -- the operational commanders are pulling out from the 
intelligence person as much information as they have or tasking them where there are 
gaps to try and fill them. 

That's the give and take that a high-performing intelligence operation, meaning 
the collection, production, and consumption, would kind of feed that loop. That way we 
know what the gaps are, that intel that operational commanders want to hear and need 
to make good decisions and -- or informed decisions. | don't mean to say good 
decisions; you just have to make an informed decision. And how intelligence fits into 
that. 

Q Soto close that loop, is it fair to say then that that expectation of how you 
would -- of how sophisticated consumers of intelligence might interact with what you're 
telling them, that you did not have those interactions after briefing the -- either 


leadership at Capitol Police or the operational side of the department? Is that fair? 
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A That's fair to say. 

Q_ Tell me if this is also correct: | think you've mentioned before that, you 
know, there are certain questions that you would expect, but that often there were no 
questions at all after an intelligence briefing. 

A So when we were -- specifically in the lead-up to the 6th, there were no 
substantive -- there were no questions to myself or Julie with regard to the events that 
were planned on that date, with the exception of, you know, how many groups would be, 
you know, asking for permits. It was a very -- it was not a sophisticated conversation 
where we would be tasked with answering harder questions or ones that might exceed 
our skill sets or tasking our analysts to go back and kind of further that. 

Q What was the process like? Was it very routinized or sort of was it ad hoc 
by which you -- the intelligence side was to communicate its findings with leadership or 
with the operational side? | know you mentioned that there were two briefings before 
January 6th. Were -- is that it? Are those two briefings the full of it as to how 
intelligence was supposed to get to that other side? 

A No, no, no,no. So there was the preliminary reports that were shared and 
then a written report that was similarly shared, and that was what was briefed. So the 
report, | forget the dates, there was one that went out in advance of our briefing 
on -- during the week of the 26th or so, 25th, before -- before -- 

Mr. Franz. New Year's. 

Mr. Donohue. -- New Year's. And then the report that was sent out to 
leadership on the 3rd with the briefing -- I'm sorry, on the 4th with the briefing in the 
afternoon or midmorning of the 4th. 


By 


Q_ Right. Andso then you're talking about the written threat assessment that 
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ICD produced, correct? 

A Yes, sir. 

Q_ Allrighty. So is that -- so those are the three ways is what you've listed, 
right? Two briefings, one in late December, one in -- on January 4th, and then, of 
course, the threat assessment that was what you briefed leadership and others on on 
that January 4th call. 

So my question to youis: Were those briefings -- you know, are they -- at the 
time were they regular? Was it, you know, we're going to meet once a week? Were 
those ad hoc? And was there anything outside of those three things how you were able 
to get either intelligence to the leadership, so on the 5th, on the 6th, now that you've 
already done the call, you've already done the threat assessment? What was the 
process by which you were to inform them, and was it routinized? Was it 
institutionalized? 

A No. And let --| want to be clear. What had happened in the prelude to 
the 6th is -- was -- meaning those two briefings and the written report were exactly the 
way a professional intelligence organization should share its assessments in how things 
were changing and how dramatically they had been -- they had been -- kind of the volume 
and tenor of the online kind of dialogue. 

So that sort of briefing is a -- is a -- is something that, from what | understand, was 
unusual in the Capitol Police until Julie and | got the new positions, and that may have 
actually contributed to some of the -- may have been a reason why it was unusual for 
people to hear what we were saying. 

| know that many operational commanders had stopped going to the formerly 
held intelligence briefings that were run by IICD prior to COVID, because there were some 


who said that it just wasn't worth their time, there wasn't a lot of good information that 
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was coming out of them. 

So with that having been said, information flowed from IICD through the 
commander of protective intelligence, Sean Gallagher, and then through the chief 
of -- Chief Pittman to get to -- ultimately to get to Chief Sund. 

So the question of how we can communicate was either by verbal, because Chief 
Gallagher was on the same floor as IICD, where myself and Julie were literally right 
outside of his office. And the operational commanders for protective intelligence 
literally sat across the hall from me at the time, so those who have -- I'm sorry, protective 
detail. 

So being out in that floor we were able to have ad hoc conversations, but the 
formal sharing of, you know, distribution of that was through that email chain and 
through that -- through the verbal briefings, meaning those phone calls. And then 
obviously additional information, as it came in, we shared verbally or through an email 
with the chiefs. 

Q What was your understanding of the process for sharing intelligence with 
the rank and file? How did that, if it did, occur? 

A So my experience would have been, and the way | understand it, the way 
most police agencies operate with regard to intelligence, it comes in, you know, held by 
people who have kind of the ability to contextualize it and then share that in a way with 
the operational commanders. 

Operational commanders would then share that information within their world 
view. So people that have, say, the House division, the Senate division, any of the other 
operational divisions would hear what was read out by their supervisors who hopefully 
had, you know -- and this is, you know, at a high-performing level -- would've taken notes, 


would've seen the products and distilled it to their staff in a way that was -- allowed them 
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to communicate the important points of it forthem. So ina hierarchy, right -- 

Q Yes. 

A -- it would spread out in that way. 

Q _ Sointerms of the written product itself, and it wouldn't reach necessarily 
the rank and file, the thought process was that the -- their -- their leadership would distill 
it for them verbally at roll call or at other places, yep? 

A And that is both my experience in policing and what | would believe to be 
the case, which is why you have a phone call with executives and allow them to distill it 
for the context in which their personnel would be working. 

Q What were you seeing in the intelligence leading up to January 6th? So if 
you could just, you know, broad strokes, when did you start to notice that the event 
might pose a significant threat, and what were some of the things that you were seeing 
that led you to think that? 

A | would say the intensity, the frequency, and the tone of things as they 
were -- as they were developing. | don't want to -- | don't want to look through the lens 
of what happened now. | want to put myself in that timeframe before the 6th. 

Clearly, the tenor and the frequency of the postings were concerning and were 
coming at us from -- and | say "us" -- coming at us from a lot of different places: from 
our colleagues in the Metropolitan Police Department; from our colleagues in the NTIC, 
which is the National Threat Intelligence Center; the D.C. Fusion Center; from our 
colleagues over at the NVRIC, the Northern Virginia Regional Intelligence Center; and 
colleagues in the Maryland State Fusion Center; as well as my colleagues from my years in 
policing from New York and Philadelphia and other -- when you're seeing that come from 
so many places, it was raising levels of concern. 


My personal point where | became very concerned about the events of -- that 
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were presented -- that were coming to a head what would happen on the 6th was the 
event of a person who was arrested in Arlington, Virginia, at a hotel. | believe it was on 
January 1st. He was from the middle-of-nowhere, New York, and said he had drove -- in 
his Mirandized statements, the police who arrested him at the time, for letting rounds go 
in that parking lot from a -- what would be commonly called an assault rifle -- he said, I'm 
here to protect Donald Trump. 

That -- that was something that gave me grave pause for concern, having people 
say that's why they were present and present with weapons was what changed the 
dynamic for me, and as | said, that happened on the 1st. 

That is when it was very clear that there was something much more afoot that we 
needed to be worried about, because people were actually materializing coming down 
there, talking about the then-President, and bringing guns with them and acting in ways 
that were specifically, you know, related to the Presidency. 

Q Touching on the former President, did you or your analysts notice anything 
shift or change after his December 19th tweet in which he publicized the January 6th 
event and said, be there, it will be wild? Do you recall how that affected things? 

A It certainly changed the tenor and our understanding of -- what that means 
is he -- there was a personal involvement by him saying that, you know, the -- the -- we 
did not know whether or not the President would actually be attending the events on the 
6th. That was not something that was immediately apparent. But his -- that particular 
tweet was definitely noticed by people in the intelligence community and by IICD. 

Q Can you just go through a little bit of the tenor you were talking about? 

You said frequency but you also said tenor. What was it that you were seeing in terms 
of that was concerning? 


A There were reports that we had received from -- and -- from our colleagues 
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in other intelligence organizations -- from other law enforcement organizations, | should 
say -- that were passing a lot of the information that was in open-source channels, as well 
as that raised that concern about talking about how people should engage in 
communications security, COMSEC, how people should engage in operational security, 
OPSEC. 

There was terminology that was used that spoke, you know, about, you know, 
defending freedom but was, you know, always attendant with the idea of, you know, we 
have to go there and defend people, which when you put it in a context of some people 
saying to come armed, others -- people saying to defend their rights, they were used in 


ways that raised our concerns that people may be coming armed. 
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[3:10 p.m.] 
oy a - 

Q How did you get information or receive mostly, you said, information from 
intelligence agencies or law enforcement intelligence divisions? You listed some. 
What was the process by which you stayed in contact withthem? And was what they 
were seeing in line with what you were seeing, or was there anything new or startling 
that they provided that you did not have access to prior? 

A | would say that our -- I'd give one specific example that was incredibly 
helpful, and cut through some of those -- that the -- that was very helpful for IICD and the 
Capitol Police, is when NTIC embedded their analysts with us and being able to help us, 
knowing what they would see and then what we would see. For information that was 
coming from some police agencies, some was the same. Some of it is what we call 
circular reporting. It's something that you surely said with somebody else, and it comes 
back around. 

And given the volume of things that were being said online, | don't think there's 
one place where it's all been collected. But alot of what we saw, a lot of what we 
shared from other law enforcement agencies supported our growing concern that there 
could be -- well, what we ultimately wrote, that there could be violence. 

Q What about FBI and DHS, INA? _ | hear -- you know, you have listed a lot of 
local -- Federal partners, but, you know, local D.C. area partners. What about those 
two, you know, big, sort of intelligence, Federal intelligence agencies? Were you in 
contact with them? Did they contribute to the threat picture in any way, or were you 
siloed from them? 


A So the USCP was not siloed from them. There's, you know, our people who 
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are embodied in the Joint Terrorism Task Forces, as well as our people who were in 
the -- the one analyst who was embedded in the NTIC. 

So there was conversations, but | would say we didn't receive a lot of information 
in the form of written products from FBI specifically or INA; but INA does produce some 
good information for consumption, and they were framing things. Obviously, | do want 
to say that there was a lot going on in the lead-up to the 6th from that threat picture. | 
think it's worthy of mentioning it here. 

We were in the middle of a SolarWinds attack. That had just happened. There 
were the attacks on the residences of the Majority Leader and the Speaker of the House, 
Majority Leader of the Senate and Speaker of the House, and then we had the Nashville 
bombing. All of those were kind of active investigations, and, you know, the FBI has a 
lot to do in the investigative part of it. 

What we were seeing was much more akin to what a law enforcement 
organization, not in an investigative capacity, but in an intelligence capacity certainly, 
would be more apt to seeing and concerned about with the way it was playing out on 
social media. 

So I'm not diminishing the Bureau or DHS. I'm distinguishing kind of the 
functionality and how they're arranged. As | said a little bit earlier -- and | would refer 
back to that -- the questions that you asked as a police official, police chief, a person who 
has got to kind of do that sort of protection of physical building, et cetera, is somewhat 
different than the intelligence that would be garnered from an intelligence operation that 
would have, say, human intelligence. 

Q  Socan you go into that a little bit? What about the way that the FBI or 
DHS, INA, their mission, the way they're structured, you know, would not be as apt as 


potentially the, you know, intelligence divisions in a law enforcement agency, like United 
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States Capitol Police, or maybe Metropolitan Police Department, what about their 
mandate or if they have, you know, restrictions, Federal restrictions on the gathering of 
intelligence, particularly in the domestic space? What makes them different, do you 
think, and not as apt to pick up on things that maybe you or the Metropolitan Police 
Department or NTIC could pick up on? 

A | don't want to comment on the FBI's mandates or missions or 
responsibilities because | can't -- | cannot speak competently to that. But! can speak 
only to my experiences, and | would just refer back to what | just said. You know, law 
enforcement is going to ask different questions from a protective standpoint than, say, an 
investigative kind of body would retrospectively. And | would just leave it at that. 

| think, you know, | gave -- one of the things that you quoted me about was the 
intersection of civil liberties and law enforcement that have been sort of at a crossroads, 
and it was because the idea that people can speak freely online and have their freedom of 
assembly, freedom of speech doesn't mean that you can't protect. You just have to 
know what you're looking for and what are the right questions to ask to fulfill a protective 
mission. 

Q__Donell Harvin, the head of NTIC, said he reached out to you in the days 
leading up to January 6th to discuss, you know, what they were seeing to sort of share 
information. 

Do you recall speaking to him and, you know, what you two discussed, you know, 
his tone, how you reacted, that sort of thing? 

A Yes, | do remember talking to Donell. We were in frequent and routine 
contact. | believe -- well, you know what, | don't know what our exact conversation was, 
but | think we both were very concerned, highly concerned about what we were seeing 


more broadly. 
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Q_ So, ultimately, the threat picture that NTIC was able to provide to Mayor 
Bowser and chief of the Metropolitan Police Department, Robert Contee, led to the 
request for the D.C. National Guard, led to full activation of their officers. It led to 
certain operational changes that would, at some point, lead to a curfew being put in place 
on January 6th, and also, you know, announcements that counter protestors stay home 
and not go out into the city to mix with the pro-Trump demonstrators on January 6th. 

So it led to a lot of operational changes, some of which were quite successful. 
The time it took for the Metropolitan Police Department to respond to the Capitol was 
very quick to assist once the breach happened. 

I'm trying to get a feel for if the positioning was not the same at Capitol 
Police -- and, of course, if in your view it was, that operationally, Capitol Police was as 
prepared as they could be given the intelligence, then certainly say that. But tothe 
extent that it wasn't, to the extent that the same intelligence led to some preparation for 
the Metropolitan Police Department that did not do the same with Capitol Police, I'm 
trying to figure out what in your mind was the difference? 

A Let me -- if you could refine it. So are you asking me as a former 
operational commander, or in my role at IICD? Because one would suggest | would 
speculate because | don't know decisions that were made at the high levels and vis-a-vis, 
what decisions were made in MPD. So both of it actually require me to speculate, and | 
don't want to go down that road. 

Q Well, to the extent -- you mentioned you don't know what happened 
operationally, that this may be a platform for you to talk about that. Maybe that's a 
problem, that the head intelligence person doesn't know what -- you know, what 
ultimately led from the warnings that you were giving. 


So | guess what -- you know, if you're comfortable surmising, you can speculate, to 
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the extent that however much you feel comfortable because | am asking your opinion 
basically from your vantage point what you think went wrong because that's, ultimately, 
our mandate is to try and figure out what went wrong so it won't happen again. 

So given the fact that you are sort of the point of failure for intelligence getting to 
the operational and to the leadership side, and to the extent you could give us any sort of 
insight how or why that -- do you believe it, do you believe it true that it did not 
fully -- was it fully operationalized to the extent that it should be? ‘If you could give us 
some insight into that, we would be most appreciative. 

A | would say knowing that -- and | could speak about this from policing more 
broadly, so I'm not going to put it in the box of -- exclusively in the box of the USCP. 

The intelligence capacity, in most police agencies, has a direct line to the chief, 
and | think what -- and although there was no prohibition in place for, say, me to pick up 
the phone and speak to Chief Pittman or Chief Sund, that wasn't explicitly the chain of 
command. It was I, you know, would share it with Chief Gallagher and the extent to 
which, you know, we had conversations with Chief Pittman, share with her. 

So, | think the way intelligence was shared prior versus when we were -- when we 
first kind of put these steps in place, | mean, the ease with which the intelligence capacity 
can have a dialogue with leadership more routinely so they understand what capabilities 
exist at an intelligence level, begin to be comfortable in asking questions so that there's 
kind of this feedback, which we absolutely put in place post 6th, | think, you know, that 
was all on that roadmap to get us into a much more higher performing organization. 

But some intelligence has to be shared with those who need to know, you know, 
where there's a need for privity, and which is why an intel function usually goes direct to 
a chief. 


And | think that was going to be on the roadmap for IICD and intel more broadly 
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within the USCP. | don't know if that's been executed on or if it's still in the 
conversation stages. 

Q Well -- and | know you left in April, but it's my understanding -- and | don't 
know if this happened before April -- that there -- you know, there may even be daily -- | 
think there are daily briefings now, and there may have been at the time before you left 
maybe a weekly briefing. Is that right? 

After January 6th, did things change in terms of the seat that IICD had at the 
table? 

A Dramatically and for the better. We were giving near -- and | say 
near -- daily briefs in advance. We were giving daily leaves in advance of the 
inauguration. We were clearly giving briefs to the staff -- the officers. | personally 
gave briefings to every officer in the entire USCP over the course of a week-and-a-half 
period because of all of the different tours and shifts and when people were working. 

So the mindset of intelligence rapidly, you know, had to -- you know, we faced 
that very real question of what do you need to know and how can we understand what 
we're seeing. That wasthe intel component. And, frankly, | think there was a lot of 
great questions and good synergy that came out of it. And those questions that came 
from operational commanders forced me, Julie, the staff, to come back and fill gaps when 
they were asked. 

Q- And they were -- 

A And they were much broader, so yeah -- 

Q No. Goahead. They were much broader? 

A Yeah. They included people from the Sergeant at Arms offices. 

Q It's fair to say, then, January 6th was the catalyst for that change happening 


so rapidly since it was January 6th that led to those immediate changes? Is that fair? 
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A | think there's a very -- it may have been onthe roadmap. That roadmap 
and time frame was accelerated to literally overnight, and appropriately so, given what 
we -- you know, all of the things that we were seeing still on social media, even when 
things -- you know, to some degree when some of the platforms deplatformed people, 
we didn't have as much visibility. But, clearly, where we did have visibility, there were 


still concerning statements that were being made. 


sf! could? 


Pe 
By 


Q_ Hi, Mr. Donohue. | know you mentioned that -- 

BE “WVe can't hear you, aaa 

Mr. Franz. Wecan't hear you. 

HY ou're fading in and out. 

Gan you now? 

Ss Better. 

a. Okay. Good. 

CY a 

Q | know that you just mentioned that were -- [inaudible.] Do you remember 
attending any meetings with the House Sergeant at Arms [inaudible.] 

| think, RR you wanted to ask if he had any meetings with the 
House Sergeant at Arms before January 6th? 

ict. 


Can you hear me now? 


a. Yes. Now you're good. 
. Great. So it must have been my earphones. 
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CY 
Q_ The question is, prior to January 6th, do you know if the intelligence about 
January 6th was shared with the House Sergeant at Arms or the Senate Sergeant of Arms? 
A | believe there was something sent from Chief Gallagher to the offices. | 
don't know who received it at the Senate or House Sergeant at Arms offices. | had only 
met with Mr. Stenger and his staff once before the 6th, maybe twice, and the House 
Sergeant at Arms only once in his office. So personally | only had like meet-and-greets 
prior to the 6th. 
Q_ And were these meetings about January 6th, or were they just general 
meetings? 
A They were not -- they were just general meetings. They were not 
specifically the 6th. 
Q When you say you believe it was sent on to them, did you and Chief 
Gallagher have any conversations about the Sergeant at Arms meeting breached into the 
intel that you had? 
A What he said is that he sent the report out when it was my belief, that's my 
understanding, that it went to the Sergeants at Arms. That's what | was led to believe. 
—— Thank you. 
Mr. Franz. Why don't we take a break. 
Hey, MP? 
a. Yes. 

Mr. Franz. Can we take a break? 
B.S course. 

Mr. Donohue. | want to get a glass of water. 


Mr. Franz. How much longer do you think you're going to be? 
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—=a Maybe -- | scheduled 3 hours, so | think I'm going to use the full, so 


just another hour and a half, if that's all right. 
Mr. Franz. Yeah, okay. 
Mr. Donohue. _|'m going to get some water. 


And we'll be off the record. 


Mr. Franz. Okay. In light of that, we'll do 10 minutes. It's 3:27. 


we come back at 3:40. 


a. Allright. Sounds good to me. 


Mr. Franz. Thank you. 


MEE course 


[Recess. ] 


a. We can go back on the record. 
By as: 


Why don't 


Q_ So, Mr. Donohue, to your recollection, did any organization in the 


intelligence community or law enforcement, other than yourselves, of course, produce a 


written threat assessment that reached you prior to January 6th? 
A No, none that reached me prior to January 6th. 


Q Okay. Was that a problem? 


A When you say a threat assessment, you're talking a refined intelligence 


product? 
Q Yes. 
A Not warrants or intelligence? 
Q No. I'm-- 


A | would say no. 
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Q Something related to the January 3rd threat assessment put out by IICD, did 
anything like that -- did you get anything like that before January 6th? 

A No, sir. 

Q- Allright. And was that a problem, as in would it have helped if ones had 
been generated by the FBI or DHS, INA, for example? 

Mr. Franz. What? Could you say -- 

Mr. Donohue. So, if somebody had done -- if another law enforcement gave us 
deeper insights, would that have been helpful? Clearly. | mean, I'm very comfortable 
in saying, you know, in assessing any potential event, you want to have as much 
information as you possibly can. And if there was something that was done by another 
agency, it would have been great to have that. 

TCE 

Q  Doyou have any insight as to why one was neither created nor distributed? 

A No, no idea. 

Q Was the lack of one given, you know, your experience, surprising or 
frustrating for you in the lead-up to January 6th? Was that a gap that you, yourself, 
realized and identified? 

A | think at the time, knowing that there was a lot of information being shared 
among and between, not so much. But, in retrospect, | think it would have been great. 

But | would also -- and | just want to focus on IICD and USCP for this one specific 
answer. Noone has the obligation to Congress and to protect Congress like the USCP. 
So our world view in producing our assessment was given that framework. | mean, the 
USCP is unique among law enforcement organizations as it's the only legislative branch 
police agency with, you know, the responsibility to protect Congress. 


Q_ Right. Are there any restrictions, Federal or local, that guide IICD's 
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collection of intelligence, like other agencies within the IC community, intelligence 
community? 

A For things that would prevent -- so there are policies that are in place for a 
lot of law enforcement organizations. The professionalizing of what IICD and USCP 
would do with respect to collection of intelligence, | think there could be more policies 
written, clearly; but at the time, we were operating underneath what the construct was. 
And | would have to go back and look exactly what the -- what it was prior to the 6th. 

Q Well, certainly, ultimately, in the threat assessment -- and, you know, the 
line that's focused on the most, we'll get to it in particular, but about Congress being the 
target, certainly it did not appear that any of those restrictions inhibited your ability to 
come away with the threat picture that you guys did. | wonder if you could speak to 
that. Whynot? Why was that not a hindrance? 

A Oh, okay. Now| understand. 

So the idea of collection, collection on Open Source and the various social media 
platforms, we, meaning the USCP, in our mission to protect and assess what the 
likelihoods are of events that are occurring in and around the Capitol Complex is really 
what our focus is. 

So similar to law enforcement that are protecting buildings and people, you use 
what's at your disposal to develop information that can help you assess the, you know, 
threat, the potential of danger, whatever words you want to use, against the facility, 
against the person. 

| think -- and, certainly, in laying out what we were looking for during the lead-up 
to the 6th was a broad kind of understanding of what's the environment against -- and 
what could happen, you know, potentially to our protectees or around the Capitol. 


| think other organizations may not have that sort of either outlook or that 
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capacity. And I'll refer back to my testimony that | gave back in July of 2020, which is, 
you know, this civil liberties argument about, well, what can you look at versus what 
should you look at, if it's online and it directly impacts our protectees or our mission and 
it's Open Source, it's kind of fair game. 

It didn't mean we opened up an assessment on individuals based on activity that 
they said, but we may have opened up investigations on people who leveled direct 
threats against lawmakers, or that could be construed as threats against lawmakers and 
use that as a mechanism for -- you know, because we have to investigate those threats. 
That clearly is in the realm of responsibility of the USCP. 

So, | think it's the competing question of we need situational awareness, but we're 
not collecting to inhibit people's speech. We were doing it for specific reasons. 

Q Soto that end, you know, do you see -- is there value in nonspecific, 
noncredible threats in assessing, you know, the threat landscape and coming -- putting 
together a picture that may not lead to any investigative actions, you know, getting a 
warrant, knocking on someone's door, but, nonetheless, has utility in being stitched 
together in some sort of threat assessment so that people can -- organizations can 
operationally, strategically, you know, plan around it? 

A You just -- you used some very good words, and | want to parse it out. 
Absolutely more information in determining kind of -- I'll use the word, the 
environment, the atmospherics. More information helps understand that, and visibility 
into an understanding of what's transpiring in the Open Source world -- and I'll use social 
media -- | use the word "Open Source," but | also mean social media -- is crucial to 

understand that. 

And that's because we're thinking about intelligence three ways. There's 


strategic intelligence, which you touched upon. There's operational and tactical, and no 
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one wants to be blinded, or be blind, to what's happening broadly in the world because it 
helps put things into context. 

So thinking about what is being said and kind of the tone online and how many 
people are wrapped up into a particular thing, like, you know, you can think about how 
people have leveraged -- read it for, you know, meme stocks, it's understanding that that 
has consequences in kind of the real world. 

So strategically, you need to have an understanding that what's being said can 
influence the dynamics. It can lead you to operationalize -- operationally do something, 
but, obviously, a lot of what didn't exist was really good tactical intelligence in many 
respects for, like, the who, the exact what. But the atmospherics is crucial to 
understand. And that helps contextualize when you see things that are materializing in 
front of you. 

So | think the word "strategic intelligence," you know, is really important in that 
concept. 

Q_ Allright. So let's talk about the -- it's exhibit 4, but the threat assessment, 
the final threat assessment for January 6th that was completed on January 3rd. What 
role, if any, did you play in drafting or developing the document? 

A | started the staff to start putting it together, reviewed some of the changes 
as they came across, you know, made some minor edits along the way, and sent it when it 
was finalized -- you know, when it was finalized, shared it with the executive staff. 

Q What role did Ms. Farnam play in either the drafting or the development of 
the document? 

A She's one of the primary drafters. 

Q = Doyou recall whether the initial sort of draft that had gone through both 


you and Ms. Farnam didn't have that final paragraph and that Deputy Chief, at the time, 
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Gallagher, Sean Gallagher, asked you and Ms. Farnam to draft that sort of final paragraph 
and insert that into the document? 

Does that ring a bell about that having happened? 

A Yes. 

Q Okay. Can you tell me, what was your understanding of what he wanted 
that final paragraph -- why he wanted it changed or inserted? What was his thinking? 

A He said there should be a little bit more to it. 

Q Okay. And so did you have any more direction than that or did you -- you 
know, because you ultimately drafted something? Right? 

A Yes. 

Q Okay. Doyou recall what it is that you drafted? What was the gist of 
what you sent? 

A | don't know off the top of my head. 

Q _ Ultimately, was what Ms. Farnam drafted what was incorporated into the 
final assessment? 

A Yes. 

Q___ Did you take Mr. Gallagher's direction to mean that the language should be 
stronger, that it needed -- in what direction did -- you said a little bit more. What did 
you take that to mean? 

A | took it to mean that it needed to be something that conveyed the -- a little 
bit more that conveyed the intensity of what we were seeing. 

Q So the overall analysis, right, concluded with these sort of two sentences. 
Quote, "This sense of desperation and disappointment may lead to more of an incentive 
to become violent. Unlike previous post-election protests, the targets of the pro-Trump 


supporters are not necessarily the counter protestors as they were previously, but rather 
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Congress itself is the target on the 6th," end quote. 

So sentences like those, is it fair to say that was not a part of the sort of initial 
threat assessment before Mr. Gallagher asked you and Ms. Farnam to write that sort of 
last overall analysis paragraph? 

A Yeah, that's true. 

Q Okay. That was added afterward, correct? 

Yes. 

Q Do you think that warning, particularly that Congress itself was the target 

and not counter protestors like the previous two marches, do you think that warning was 


properly heeded by the Capitol Police leadership? 


A In retrospect, probably not. 
Q Why not? 
A | do not know. 


Q Okay. What did they do, if you know at all, with the -- we're going to talk 
about the January 4th conference call. You know, obviously, there's a threat assessment 
that you have given to leadership. 

What did they do with the information you gave them operationally, if you know? 

A | do not know. 

Q Okay. Sois it fair to say after, you know, the threat assessment on the 3rd, 
the conference call on the 4th, information wasn't being shared in the opposite direction, 
then with you as to what changes, if any, would be made based on this assessment? Is 
that fair? 

A | -- are you saying do -- | don't understand the question. 

Q Did anyone at any point after January 4th tell you what changed 


operationally as a result of your briefing? 
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A No, not atall. | wasn't in the operational chain of command. 

Q Okay. Andso you weren't in the chain of command, but were they present 
on the phone call when you gave your briefing on January 4th? 

A Yes. Well, there were a number of operational commands that were on 
the line. 

Q Okay. But nothing was communicated to you as to what was being done 
about your and your division's warning, correct? 

A No. 

Q Did you come to find out later, at any point, to this day, do you know if there 
are any changes that were made as a result of your briefing? 

A | don't remember. 

Ee = Vr. Donohue, | have to jump off for another call, but | had one 
question about this. 

My colleague had kind of walked through some of the operations -- can you guys 
hear me -- about some of the decisions that were made operationally from the 
government after they were briefed. One of them was requesting the D.C. National 
Guard for traffic points. 

Do you have a thought or sense of what should have happened with the 
intelligence assessment [inaudible]. 

Mr. Donohue. Something broke up. 

Mr. Franz. We're losing you. We got most of it, but not all of it. 

Gan you hear me now? 

Mr. Franz. Much better. 


Mr. Donohue. Much better. 
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Did you have a sense of what the Capitol Police should have done with the 
intelligence assessments? Did you have an expectation? [Inaudible] 

[Reporter asked for clarification.] 

P| She said do you have an expectation of what Capitol Police would 
do, an expectation as to what they would do with the intelligence that you were giving 
them? 

Mr. Donohue. | think it's -- in retrospect, yeah, there could have been more that 
could have been done. Maybe. Again, not knowing the operational posture, 
limitations that the organization had, | don't want to say that they could have, but | 
believe that, you know, if they've -- if certain people read it that way, it should have 
helped. 

Cy 

Q And |think you have told the committee before that the expectation is that 
there would have been an impact from the assessment. | assume you wouldn't have run 
the assessment if you thought that everything -- the plans would remain the same? You 
wanted to convey a sense of urgency that something different should take place, correct? 

A Yes. And that's why, as | said, the two drafts -- the two reports that went 
out and the briefings were highly unusual. | think that's conveying the sense of urgency 
that we were -- it's a demonstration of the sense of urgency that we had. 

Q Okay. The warning came on, effectively, the last substantive page of the 
threat assessment. It's page 13 of 15, where the two last pages were largely footnote 
citations. 

In hindsight, do you think it would have had more of an effect if it had appeared 
on the first page of the assessment? 


A Yes. 
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Q Did you receive any personal feedback that some people in the operational 
side of the division of the Department did not see the assessment? 

A After | had gone around and gave the intelligence talks to all of the people 
out in the field, it was -- and | couldn't say who said it, but there were some members of 
the Department that said that they hadn't seen it. 

Q  Andwhen you say that you were sort of interviewing -- or speaking with, I'm 
sorry, out in the field, that's post January 6th, correct? 

A Yes, sir. 

Q Allright. 

Similarly, on the second page of the assessment, it reads, quote, "The 
protests/rallies are expected to be similar to the previous Million MAGA March rallies in 
November and December of 2020 which drew tens of thousands of participants," end 
quote. 

In hindsight, might that have undercut, particularly as it comes early in the 
document, that later warning that actually, no, this third demonstration is meant to be 
different than the previous two, meant to be sort of different in kind and rhetoric and the 
volume, that sort of thing, than the two previous marches in November and December? 

A It's clear that there was -- that it looks like there was kind of cross-messaging 
inthere. | would suggest that, you know, as we were writing and it was an evolving kind 
of document -- you know, it wasn't the absolute perfect thing that it could be, but it 
contained that warning. 

Q_ And in fact, also, in exhibit 30 that | provided to you previously, it's the Civil 
Disturbance Unit operational plan created on January 5th, and on its first page it listed 
that prior draft | just mentioned, the one noting that January 6th would be similar to the 


demonstrations on November 14th and December 12th of 2020, and it actually goes into 
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antifa and counter protestors. But nowhere in that document does it reprint your main 
warning about how January 6th would be different. 

My first question is, did you even have an opportunity to see, review, read it at all 
the Civil Disturbance Unit operational plan prior to it being developed, created, sent out? 
A And the very direct answer is no, | did not even know that that was a 

document that was produced. 

Q_ Andso, not having a role in it, is it problematic? Does it appear to be, you 
know, a mistake that what was lifted, was sort of that -- you said there's cross-messaging 
and what was lifted, unfortunately, is the piece of it that is not as important versus the 
sort of later paragraph that, you know, you believe to be sort of utmost importance. Is 
that a problem the way it was reproduced, do you think? 

A One second. 

Q Sure. 

[Witness conferred with counsel. ] 

Mr. Donohue. Hello, you got me? 

a. Yes. Go ahead. 

Mr. Donohue. So | think it's better to frame it a different way, instead of is it 
problematic that the document -- the document contains what it says, and it has to speak 
onitsown. But! keep going back to the interactions and the conversations with people 
that, you know, both the briefings and the conversations with the chiefs 
who -- particularly Chief Gallagher and Inspector Schneider, who heard what we were 
saying, and on those calls, if people were listening, would have heard, you know, kind of 
consolidated about the concerns that we raised in the report more broadly? 

By as: 


Q Well, and those conversations, from what you have been able to testify, 
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appear to be one-sided. You couldn't tell me what sort of operational changes were 
made because you weren't told about that, right? 

A Correct. 

Q_ Andso, ultimately, the only evidence we have in the document in terms of 
how the Civil Disturbance Unit was prepared for January 6th, is that document which was 
put into writing -- it's created on January 5th, so several days -- or a day after the briefing 
and 2 days after the threat assessment is written. 

And so | suppose what I'm saying is I'm wondering how you reconcile the two. _ If 
it is, in fact, true that there are people on the operational side listening to what the 
warnings were, why do you think that the written product, what's meant to capture their 
preparation for the Civil Disturbance Unit, does that accurately reflect the warnings that 
you and your colleagues tried to convey? 

Mr. Franz. You know, IM can | just jump in here for a minute? 

H. Sure, you can. 

Mr. Franz. | don't want to speak for Jack, but | think what he's trying to say is 
what you've done -- and you're right. You know, the paragraph that gets added at the 
end, right, about Congress, in retrospect, it would have been great had that been the 
leader in the front of the document. 

But maybe you should ask him, right, it might be easier for him to answer you is, 
was the wordsmithing of the document his primary concern or was it conveying the 
information? 

And, number two, is it traditional that operations -- was he concerned that 
operations didn't tell him what they were doing and did he care, or was he just passing on 
the information that he needed to. Because it's starting to sound a little bit accusatory, 


like you failed here with the document, and that's the only evidence we have. But 
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there's a lot more to it than the document itself. 

| think you shouldn't have total reliance on the document at the moment. | just 
want to be clear because of the way the questions are being framed. 

| want to be clear, Mr. Donohue, you have every opportunity to 
answer however you like, pulling from whatever experience you have and whatever 
opinions you formed in the interim. | don't mean to have any sort of arguments built 
into the question. But, you know, answer as best as you feel you can. 

You know, would you like to answer Mr. Franz's questions? Absolutely, that's 
fine, perfectly fine. Those are also legitimate questions. | have no problem with you 
answering to the best of your ability. 

Mr. Donohue. So, no, it's clear. If the report was one-page long and concise, if 
it was on the front page of a two-page report, you know, certainly it would have 
had -- may have had different effect. 

| would say that sharing our experiences on what we were seeing is something 
that is done when you're sharing intelligence. It's called an intelligence briefing. That 
is why | keep referring to those two briefings that we had, which were sharing what we're 
seeing with those commanders. 

What came out on the special -- the civil enforcement -- the Civil Disturbance 
Unit's assessment, as | said, | don't know why, don't know why they chose that particular 
one instead of the overall assessment. That being said, the commanders for Civil 
Disturbance were on the phone calls with us. 

| would leave it at that. 

BY 
Q Okay. And|think, just to make clear for the record, my question is less so 


about the threat assessment that you've created. | think you've talked about what 
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could have been better within it. It was more to ask if you had any insight as to how 
that happened on the operational side, how it was that -- you know, if you have any 
insight into that. That was basically my question. 

A To me, | do not know. And, | think, you know, maybe later as we talk about 
what could be done to improve that as we go forward -- and hopefully that's being done 
now -- we can talk about how to better align intel's operations. 

Q __ Sir, there was also provided to you an email forwarded to you by an NYPD 
official from December 28, 2020. That's the first exhibit noting, quote, "Assume you 
have" -- and for the record, it includes reference to social media postings, such as 
protestors should, quote, "start marching into the Chambers"; that they should, quote, 
"show up with guns and threaten them with death." Regarding the President's tweet to 
attend, it will be wild on January 6th, one user said, quote, "I read that as armed." 
Another said "violent insurrection has always been the plan," that Trump "can't exactly 
openly tell you to revolt." "This is the closest you'll ever get." There's "not enough 
cops in D.C. to stop what is coming." "This is war, and we're clearly in a post-legal phase 
of our society." "Be there on the 6th ready for 1776." "Fun facts: No revolution has 
ever been won without violence." And, lastly, quote, "kill the opposition." 

How -- first, can you tell me if any of this were brought -- where -- how -- where 
this round of intelligence was sent if it was sent anywhere. __| know it reached you 
obviously. Does it go anywhere else? Does it go to Deputy Chief Gallagher or anyone 
higher up above him, the raw intelligence itself? 

A So that's the nature of intel. It could either be shared kind of broadly in 
terms of here's some of the things that we're observing. I'm not specifically recalling the 
email or the comments in the email, but it goes to that, what we were talking about 


before, the atmospherics of understanding what we're seeing. 
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Q Are you confident -- do you think that, you know, this sort of rhetoric is sort 
of -- the nature of this rhetoric, did it get before someone like Chief Sund? Was he able 
to read some of what was specifically was being said, other than, you know, the synthesis 
or the analysis of it in the January 3rd assessment? 

A | don't want to say whether he did or didn't. I'm not certain if he saw it, 
those particular ones. | can't answer that. 

Q = Sothat would mean, to your knowledge, you didn't share it with him or you 
don't recall sharing it with him and no one told you that it was being shared with him? 

A Correct. 

Q = Obviously not to say that it didn't. That's just what you were either told, or 


you yourself did, right? 


A Right. 
Q Perfect. 
A Yes. 


Q Do you think -- is there a reason that -- you know, specific raw intelligence 
like this, did it make its way into the threat assessment of January 3rd, would that have 
been helpful, do you think, or not? 

A The answer is always context. And, the specific language, the words that 
were coming out and people saying what they were saying, | think that is helpful in 
context. We were coming up with an overall assessment, and we did not break every, 
you know, document that we had written in the -- that had been written in the past so 
this was kind of finding -- you know, filling that same formulaic approach to it. We 
changed it a little bit. Putting the bluffs on there, | think that was newer. 

Specific language sometimes does help. 


Q Okay. Anddo you recall why, if there was a rationale -- and there may not 
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have been -- there wasn't as much specific language in the actual threat assessment for 
January 3rd? 

A No. | don't think that's -- | don't really have a specific answer as to why, 
you know, that concerning language wasn't put inthere. You know, | would imagine 
with the amount of traffic in social media there could have been some very choice 
language, and we just did not put that in this report. 

Q If you turn to exhibit 15, there's an email there, January 25th of 2021. You 
ask John Nugent to include, quote, "in the assessment two threat assessments by the U.S. 
Postal Inspection Service." But, of course, you know, the threat assessment from IICD 
had been finalized 2 days prior on January 3rd. 

So what did you mean by included in the assessment if we're at January 5th and 
the final product is done? 

A | know the email you're talking about, and | -- for the life of me, | can't 
remember why | sent it to him. Really, | just do not know why. And know the Postal 
Inspection Service document that you're talking about, too. 

Q Is there a reason, | guess, the threat assessment was final by January 3rd and 
was not continually updated as more intelligence came in on the 4th, the 5th, the 
morning of the 6th? You know, this particular -- you know, something about it you 
thought, you know, tipped you off? You wanted it to be somewhat shared or 
memorialized, documented somewhere and, obviously, that couldn't be possible given 
the fact that the assessment was done on the 3rd. 

So was there a rationale behind, you know, not updating it past that date? 

A It really comes down to what -- my belief and kind of how | think about it is 
we had one document that we produced. The amount of conversation that was 


happening thereafter, between what we were seeing and showing it to operational 
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people or sharing it with -- you know, verbally with Chief Gallagher was kind of where we 
sat at that point in time. 

Q_ And, so, is it fair to say now that since we're on the 5th, the assessment is 
done by January 3rd and the last briefing was January 4th, that that last way of getting 
any new intelligence information would be you communicating it to Deputy Chief 
Gallagher? 

A _ Verbal or emails. 

Q  Buttohim, right? You wouldn't -- it's always through him? You don't go 
yourself to either Chief Pittman or Chief Sund? _ It's all through Deputy Chief Gallagher? 

A To the best of my recollection is that's when it was going through Chief 
Gallagher because of where we were. 

Q_ Andis it your recollection -- sorry. 

A Anyintel. 

Q_ Andis it your recollection that as -- again, | don't know about this particular 
Postal Service Inspection Service intelligence, but is it your recollection that you routinely 
updated Deputy Chief Gallagher with anything new or bothersome or troublesome that 
you were seeing? 

A If we saw it, it was going to be shared. _ If it didn't shake -- if it didn't change 
materially the assessment, | think that's, you know, kind of the key piece of the question. 
Knowing that there wasn't -- you know, so let me answer it with a way that would make it 
easier to convey. 

If there was something that dramatically changed the assessment, such as people 
say, Don't come anymore, and, you know, all of a sudden, there's a large change to the 
outlook that people were bringing, then that would be, obviously, you know, changing 


what we were thinking. So that would have been communicated. 
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But the extent to which it kept up the same kind of tempo, that's where it would 
have been shared with -- if it changed it. 

Q  Toyour recollection, did anything that came in after the 4th change your 
outlook, either to make it more grave or less? 

A So the answer is, for the certain language that was said, you know, | know 
that there were still things coming over the transom, I'll use that word. There was still 
kind of concerning, argumentative, you know, | guess social media postings. So, yeah, 
the extent to which they were coming in, it still kept the tempo of our concern. 

Q Could you turn to exhibit 3? It's the U.S. Capitol Police Public Information 
Office's, forwarded on December 28, 2020, online indications of storming the Capitol. 

Mr. Franz. | | we don't have the exhibits up. So is there a way you can 
share the screen? Otherwise, I've got to try and locate them. 

Why don't we do this because we've talked about it in the past, 
and I've also given you the documents to read with some advance warning. Let me run 
through what | have quoted, and if there's something you need to see about the actual 
email, because it's not necessarily -- I'm not asking about particular language in the email 
or to whom it was sent. _ It's just more if you recall that particular piece of intelligence. 

Cy ae: 

Q = So the email I'm talking about is from December 28, 2020. It's from Grace 
Spellman, a self-billed, quote, "internet expert tracking far right extremism," and she 
includes in there online indications of plans to storm the Capitol. And it was sent to the 
United States Capitol Police Public Information Office. That's the only sender -- or the 
recipient on that email. 

Do you got it? 


Mr. Franz. Do you need us to bring it up? 
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Mr. Donohue. | remember seeing it, but | do not remember it from back then. 
CY as 

Q Sure. And that's all my question is first going to be. Do you recall if you 
saw that email in particular, that particular piece of intelligence before January 6th? 

A | didn't get that information beforehand that | can recall. 

Q Right, of course. 

Before January 6th, are aware if the tips sent to the Public Information Office 
made their way to IICD? 

A | do not know. 

Q Okay. 


A | do not remember seeing them. 
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[4:18 p.m.] 
BY a: 

Q Okay. And you don't know -- maybe just like the process, how -- is it -- was 
there a process in place for them to get to you or not really, that was sort of a separate 
entity that -- in which you did -- and you guys did not share information like that? 

A | do not recall where something like that would've gone to. 

Q Okay. Exhibit 5 is thread emails. Let me sort of run through them, and, 
again, if you need to look at them, but you're not on the thread so it's just to give you 
some background. 

Sean Gallagher sent to Chief Pittman on January 5th, 2021, at 4:10 p.m., that 
WashingtonTunnels.com had been receiving a dramatic uptick in new visits; that the site, 
TheDonald.win, had been active in promoting photos of the tunnel system; and that U.S. 
Capitol Police had identified numerous open-source comments by groups of their 
intention of finding tunnel entrances and confronting or blocking Members of Congress, 
including setting up a perimeter to block entry or escape. 

That same day, this is January 5th, at 4:55 p.m., Chief Pittman forwards the 
intelligence to Chief Sund saying that they should hold a call regarding the intelligence. 
And later correspondence with Capitol Police counsel appears to indicate that the call 
may have never happened. 

My question to youis: The intelligence that | just sort of rattled off to you about 
the tunnels, were you aware of that particular intelligence involving the tunnels prior to 
January 5th? 

A I've become aware of it since. 


Q Okay. So you're -- are you not sure or you were not aware of it before 
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January 5th? 

A So there was -- there was -- there were postings about the tunnels that | had 
heard in -- from within -- kind of within the entire lead-up to it. | can't say exactly where 
itcame from. The -- and, you know, | can't really -- you know, because | don't know that 
particular email chain, and | definitely do not remember a phone call happening about 
that information, you know, between the 5th and the 6th. 

Q Okay. And so if | get that right, it sounds as though you had heard, you 
know, a little bit about this talk about tunnels beforehand. Are you making a distinction 
in terms of, you know, how detailed chief -- Deputy Chief Gallagher's sort of -- you know, 
the websites and the uptick in visits, that that you may not have been intimately aware of 
when you said that you had heard a little bit about it? 

A So when | say -- I'm speaking, I'm sorry, specifically about mentions on social 
media about the web -- about the tunnels but not about the information in that email 
specifically. 

Q Okay. Sothe--Isee. So the mentions you had heard about but not 
necessarily the uptick in visits to these -- to the sites or that Donald -- TheDonald.win had 
been promoting photos of the system, that -- those sort of specificities? 

A Those two pieces | did not know. 

Q Okay. So then! think | know the answer to this, but so then, do you know if 
that intelligence was communicated by you -- obviously not by you -- or someone else 
within IICD to leadership, including Mr. Gallagher, Ms. Pittman, or Chief Sund prior to 
January 5th? 

A | do not know. 

Q Okay. And I think you should -- or | can anticipate the answer that you 


don't -- this particular piece of intelligence, do you know why it didn't make its way into 
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the January 3rd threat assessment? 

A | can't answer it specifically, no. 

Q Okay. Did you -- did you gain any visibility as to what changed 
operationally as a result of this intelligence? It doesn't even need to be before 
January 6th. Just as you sit here today, do you have any insight into, you know, all this 
information about the tunnels, if that led to any changes? 

A | do not know. 

Q__Inexhibit 21A, that's on January 1st, 2021, Shane Lamond from the D.C. 
Metropolitan Police Department forwards a civilian tip. It includes reference to 
storming the Capitol. It mentions, you know, there are detailed plans to storm Federal 
buildings, dressed incognito, and commit crimes against public officials, is sort of what he 
had forwarded to people at IICD, including Julie Farnam and others. 

Do you recall that piece of intelligence? 

A _ The -- so Lieutenant Lamond is one of the key intelligence players at MPD 
and was, you know, kind of frequently sharing that sort of information with our team, 
with Ms. Farnam, myself. So I'm not familiar with that particular email, but he, along 
with U.S. Park Police, U.S. Secret Service police, and the NTIC were some of the people 
who shared a lot of information with us. So that doesn't surprise me that that's 
something that would come over the transom. 

Q  Doyou know if either, because it was communicated by you or someone 
told you that it was communicated to leadership, whether this sort of particular piece of 
raw intelligence made its way to people like Chief Pittman or Chief Sund? 

A | can't answer that. 

Q __Isit fair to say -- and, again, it may be "I don't know," it may be "I could 


have." Is it fair to say that at least you don't recall, yourself, sharing that -- this 
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intelligence with them? 

A No, | didn't depend -- not right now, no, | don't, | can't say that. AndI| want 
to make one distinction. 

Q Sure. 

A We're throwing around the word "intelligence." A lot of what you're 
sharing is information, right? So it's -- intelligence is a product of analysis, data and 
analysis. So what you're referring to as intel is really information that helps formulate -- 

Q Perfect. 

A --a context and anopinion. Sol just wanted to be clear about that. 

Q Perfect. | will change the term I'm using. "Raw intelligence" then is not 
appropriate either? 

A You can call it raw information. 

Q_ Right, but yes. Okay. No worries. 

A | will refer to it as information, if that's the -- you know, what | perceive it to 
be. If it's intelligence, then I'll share that too. 

Q- Allright. So turning to exhibit 12. On December 29th, of 2020, the 
protective intelligence operations center at Secret Service forwarded to the threat 
assessment inbox at Capitol Police that telegram user GFB said in a neo-Nazi chat group 
that Trump supporters in D.C. on January 6th should, quote, march into the Capitol 
Building and make them quake in their shoes by our mere presence. 

Do you recall if you saw that particular piece of intelligence -- or, excuse me, 
information? 

A | do not recall that one specifically. 

Q  Towhom would this tip in the threat assessment inbox go? 


A So typically it would land into -- as | recall, the threat inbox threats was a unit 


24 


25 


59 


in another portion of the -- which weren't part of my unit, which would be the 
investigators. They would see that and they would, if it involved a social media chatter, 
would be something that they would send to one of the analysts in the team to provide 
a -- kind of an understanding of where did it come from, is it a threat. 

So that's how threats from external actors would land in that threats inbox. And 
they would -- the analysts who would be assigned to do the workup on that particular 
social media posting would share the information back either through Ms. Farnam, who 
would send it over to the investigators -- that was one of the things that we had tried to 
figure out how to figure out who has the best skill sets in researching online threats. 

Q Sodo you feel confident that something like this would have reached one of 
your analysts, would've been assigned to one of your analysts to look into? 

A | cannot say, because | don't have the logs that -- of that particular one 
specifically. So | apologize, | just don't know that one. 

Q  No,ofcourse. No, that's fine. | guess, how routinized, how structured 
was that process? That's what I'm trying to figure out. Would sort of everything that 
went into threat assessment have gotten an analyst to look at or were there some that 
would not have reached anybody at IICD? 

A And | think that answer requires -- it actually has a number of different parts, 
as | recall how things might've played out. Understanding that the spike in threats 
against Members of Congress had been accelerating at paces that hadn't seen -- that the 
Capitol Police had never seen, and |, frankly, can never recall in my years of intel or 
policing to see that level of threat, you know, kind of reporting coming in, raw intelligence 
coming in, that was a concerning nature. 

| can't say with specificity that this was put into the process for an IICD analyst to 


look at and provide feedback to a -- one of the agents. So that's why | don't want to 
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speak with any specificity. | can talk to the general construct as we understood how we 
were supporting threats investigations. 

Q Okay. We've seen a few indications of the storming and occupying the 
Capitol and some of the information sent to Capitol Police. The talking points that 
Dr. Harvin over at NTIC gave to HSEMA and also to Chief Contee and Mayor Bowser in 
their briefing dealing with January 6th, including a warning -- included a warning that, 
quote, others are calling to peacefully -- peacefully is in quotation marks -- storm the 
Capitol and occupy the building to help the vote. Not sure what peaceful means, but 
they are calling to occupy the building. 

So my question is: Were you a part of any discussions, you, anyone else -- did 
people in -- within Capitol Police discuss the possibility -- that possibility of the storming 
and occupying of the Capitol with the operational side, with leadership of Capitol Police? 
Was that discussed? 

A | do not know if it was discussed at the operational side. The -- the -- yeah, 
| do not know if it was discussed at the operational side and how to address those 
particular concerns. | just don't know. 

Q With leadership? Were you involved in any discussion, is my question? 

A No. 

Q Okay. Had you -- had you heard of that possibility prior to January 6th? 

A Of somebody storming the Capitol or of people saying that they were going 
to storm the Capitol? 

Q Yes. 

A So -- 

Q_ Not -- because obviously there were -- there are some real-life history in 


other State capitols where there was a little bit of a -- not to the level -- you know, 
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occupying but not to the level we saw on January 6th. So, no, I'm talking about, of 
course, the possibility, was that something that you were seeing in the lead-up to 
January 6th? Is that something you were aware of that possibility, given the 
intelligence, given the information that was coming to you, which, yes, would be then 
people speaking potentially aspirationally about it? 

A So the speaking of it aspirationally, | think there were people who were 
definitely indicating coming to the Capitol. Concerns over storming the Capitol were -- | 
think there were some websites that were promoting things along those lines, yes. 

Q_ As best as you can give me an insight, was that a possibility that you know 
was appreciated or considered, or was it too farfetched, aspirational sounding? = |'m 
trying to get a feel for how seriously the possibility was taken and, you know -- and which 
is true of all my questions. |'m not trying to imply any sort of judgment. All of this is 
by necessity, hindsight as we're looking at it a year later and we're trying to figure out 
what went wrong. 

So by all means, | don't mean to be critical, but I'm trying to figure out how 
seriously was that a possibility contemplated, or was that outside of the realm of what 
was realistic or possible in your mind, in the minds of your colleagues, to whatever extent 
you're having these discussions? 

A | want to think this one through a little bit. 

Q Sure, of course. 

A Just give me a minute. 

Q  Noproblem. 

[Pause. ] 

A Say, the actual breaching of the Capitol and, you know, kind of the entering 


of it, | think | have to look at it in the context of what happened the following day, you 
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know -- I'm sorry, on the 6th, when that crowd was riled up and kind of pointed in the 
direction of the Capitol. 

So | don't want to -- I'm not minimizing what was information that was out there. 
| think the triggering of the crowd, | don't think -- | think that's really where the failure to 
apprehend was that -- was that, that people would've been activated by what transpired 
actually on the 6th to take the Capitol. 

Q Andcorrect me if I'm wrong, the triggering, you're referring to the former 
President's speech at the Ellipse? 

Mr. Franz. And others. 

Mr. Donohue. And others out of there. | mean, clearly, the -- what happened 
at that rally, meaning the one that the President attend -- the former President attended, 
activated that crowd to do what they did. Sol'm not -- I'm not discounting that there 
were people clearly posting about that as you've referred to. It's what happened the 
day of the event that really is the one piece of that puzzle that was what caused it, in my 
mind. 

oy 

Q Turning to -- the final sort of email | want to talk to you about is 26. It's on 
December 31st of 2020. Julie Farnam raised concerns that the permit request for One 
Nation Under God and Bryan Lewis were just proxies for Stop the Steal. And she was 
concerned that Stop the Steal is generally more violent, and so then, you know, they're 
trying to pose as sort of 10 different groups, whereas maybe they're actually -- some of 
them at least are just one giant group who is -- and has more of a concern for violence. 

Do you recall being made aware of this red flag? 

A Yes. And -- and | recall that being shared with the commander call. | 


believe -- | believe it was the one on the 4th. It may have been the one on the 30th, but 
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| think it was the one on the 4th where that intelligence was verbally shared. 

Q  Dovyou recall what was made, if you were told, of the warning ultimately? 

A | do not know. 

Q Okay. Do you even know if maybe there were discussions about the 
possible pulling of their permits, or you don't even recall if there were any of those? 

A I'm -- | don't want to speak improperly, but | -- but there was, | believe, a 
conversation about whether or not we -- that that could happen. But | believe it might 
have been with -- not through me, but it may have been with general counsel's office. | 
think that's what happened. 

Mr. Franz. Don't speculate. 

Mr. Donohue. But I'm -- yeah, I'm probably speculating and | shouldn't. 

ae: 

Q_ To the best of your recollection, and | think you've commented that you're 
not quite sure, so | think that is fair. 

A Yes. 

Q__ So besides the denial of the permit, did this possibility that the separate 
groups were far more coordinated and potentially just a single group particularly of a 
violent nature, did that in your mind affect the threat landscape for January 6th? Was 
this something that would be concerning outside of what you did with the permit just in 
terms of looking at the event and how to prepare for it? 

A In assessing what the motivations are to potential participants in a, you 
know, in securing ground near the Capitol, you know, in hindsight, yes. And think itis a 
piece of information that was at least acknowledged. 

Q When you say hindsight, is that because at the time you're not quite sure 


that it sort of raised a flag with you in terms of the picture and only afterward, or why do 
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you say in hindsight? 

A I'll contextualize it. When -- it's -- and | say in hindsight because in thinking 
about where all the permits were offered around the Capitol and with the events that 
actually happened on that day, meaning the bombs, the IEDs that were at the RNC, the 
DNC, the truck with all of the munitions on it, | think knowing that there was that level of 
coord- -- potential level of coordination but seeing it very clearly that some people were 
using it as obfuscation raises that concern. 

Q__ Sois it fair, do you think, that any -- you know, the warning that 
Ms. -- concerns that Ms. Farnam had and they were borne out in what actually happened 
on January 6th, that that was something that was problematic? 

A Not knowing how the operational plans were -- had dealt with the various 
protest areas, | don't know whether there was an up-staff, down-staff of personnel 
knowing that there may have been a subterfuge by people that were applying for the 
permits. 

Q_ So let's go briefly through the conference call on January 4th in which you 
and Ms. Farnam talked about the January 3rd assessment. Do you recall who spoke at 
the briefing? 


A Chief Pittman started it, | followed second, and then Ms. Farnam followed 


Q  Dovyou recall who was invited to attend? 

A It was a list of the senior personnel in the department, | think from the rank 
of captain on up. 

Q  Doyou know who actually attended? | know it's a call and not a video call. 
So are you only aware of, you know, who was invited, or can you tell me that, you know, 


they were actually present because you either looked at the guest list or, you know, how 
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does -- reconcile those two for me if you can. 

A So | do not know who actually was present. It is my understanding that 
Sergeant Larry Cook may -- who was the person who scheduled the call, may have been 
able to go through who was onthe call. But! personally did not do a roll call. 

Q And |think | provided some contemporaneous notes that -- or some notes 
that Ms. Farnam provided to the committee regarding what was spoken about at the 
briefing. | think | gave that to you in exhibit 31. Do you recall -- are those consistent 
with what you two talked about on the conference call? 

A Absolutely. What | recall is using the language that I've used with, you 
know, in our conversations earlier this afternoon, which was -- and | say this because it 
was a verbal briefing, but my statement to those who were present was that | had never 
seen the amount or frequency in volume of this sort of chatter since the rise of the ISIS 
caliphate. 

Q What was the response on the other end of the call? 

A _ Silence. 

Q_ Andis that fair to say that throughout the call, you know, that sort of 
questioning they were talking about that a sophisticated consumer of intelligence might 
have, there were no questions like that? 

A There were -- there were very few. And | think the one that was thrown to 
Ms. Farnam was about traffic cuts or may have been about who had what permits, 
where. But her contemporaneous note about -- of what she had said squares with my 
recollection of how we were communicating the level of concern that we had. 

Q And was that concerning to you, the silence and/or lack of probing 
questions? 


A It didn't have a baseline of what the leadership and senior, you know, 
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executives in USCP were with regard to -- so | couldn't make that assessment. I've made 
it, you know, obviously in the months subsequent and while | was having those 
conversations with personnel around the department, after the 6th, in making that 
assessment that that's one of the things that needs to happen. So, there. 

Q __ It's my understanding that some analysts, one in particular in IICD, sent 
internal -- an internal email criticizing their preparation for January 6th within IICD, 
including the claim that, quote, analysts have been reporting for weeks that patriot 
groups are commenting on social media their intentions to storm the U.S. Capitol with 
overwhelming numbers, end quote, but that they were in the dark about whether that 
information was briefed, quote, with the voracity it deserved and not just a one-time 
event assessment. 

Can you speak to those criticisms? Are they fair criticisms? Do you agree with 
that criticism? What's your opinion? 

A So | know who you're referring to, and | know the email that you're referring 
to, and | categorically deny that that is accurate. 

Q Would -- 

A Why? Why? Let me explainwhy. Because individual analysts don't sit 
in on the executive staff briefings that both Ms. Farnam and myself engaged in. Sol 
think it is largely disingenuous by that particular analyst to throw the language that he did 
around without having any indication or any knowledge whatsoever of what we did inside 
IICD and at its highest levels. 

| do believe that that particular individual has other concerns that aren't in that 
email, and he has many, many other issues with the agency. Sol took that as a person 
who has suffered personally, who saw friends suffer on the 6th, and was very angry and 


appropriately so at what happened to the institution of Congress and the USCP in 
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particular, but | think it was a very emotionally charged response and not a analytic 
rational response to what happened. And | forgive him for using that language, but it is 
categorically wrong. 

Q And | understand the idea that, you know, he wasn't a part of the -- or the 
analysts weren't included in the briefing, the January 4th one and the December 30th 
one, so they wouldn't have visibility into how strongly or with, you know, the voracity as 
he mentions that you and Ms. Farnam conveyed the threat to leadership and to the 
operational side. 

So the other part of that, though, | want to ask is: Were the analysts kept in the 
loop about sort of what was being seen by IICD, what was being communicated across 
the department and to leadership, and if not, might that have been better to -- if they 
weren't inthe loop? If they were sufficiently in the loop, please say so. 

A So the -- the -- the analysis was shared with ourteam. The -- theyall hada 
copy of it before it went out. | would challenge them to say -- ask them, did they read it. 
What | don't want to speculate on is, you know, what each one of them individually knew 
other than | think, you know, there are a few people who will say they didn't know 
everything, and my response to that is, | don't know everything. 

And I'm not being flippant; I'm saying that analysts don't always see everything in 
the final picture because they are sometimes compartmentalized. And| want to -- and |, 
you know -- I'm not going to litigate this particular employee, but there are reasons why | 
am categorically saying that that email is incorrect. 

Q_ There's 5 minutes left, and | sort of want to only talk about moving forward 
recommendations and what you see as the sort of problems that should be corrected. 

So can you tell me, what went wrong on January 6th? Was it a failure of intelligence? 


Some have said, was it a failure of heeding or properly operationalizing that intelligence? 
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Was it neither and something altogether different? What is your view? 

A I'm -- I'm going to say the fault lies explicitly on the people who activated 
those who stormed the Capitol, and that happened on January 6th by those who were on 
the stage and gave them the motivation and triggered them to action. 

| will -- | don't want to comment, you know, on the, you know, the operational 
side. It's not my -- it's, you know, not my wheelhouse. What | do want to say is we 
had a smaller-than-needed intelligence capacity. We hada intelligence capacity that 
was not up for the task at the entire staff level in intelligence, and we had a fractured 
intelligence apparatus within the USCP. And these are things that, you know, people 
have already had, you know, kind of opined on. 

The direct report and building USCP as having an intelligence bureau and the 
ability to provide protective intelligence information for those that are our designated 
protectees for information to protect the buildings and the occupants and the visitors and 
the citizens that come and others that come, anyone that comes, requires some more 
than what they had. 

The youngest or the least tenured employee in IICD had 5 years on him. The 
world of social media, social media platforms, and the telegraphing of information, digital 
information, had accelerated so much in the 5 years prior to January 6th that the 
organization was virtually blind to what was happening from a technology perspective 
and from those who are digital natives, which, you know, frankly, people even younger 
than myself are far better at being digital natives and navigating through those platforms 
and what's being said online. 

| think we needed to have a routine and structured ability to send people to 
training and to have the money to dothat. That was something that just was done by 


literally with shoestring -- with no budget and a shoestring. And | think that, along with 
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that training, a few more people to deal with the amount of threat activity that's coming 
over and to support the assessments of special events. | think there is that training for 
commanders to learn how to be better consumers of intelligence and what's the right 
questions to ask. 

And | really strongly believe that the sort of technologies and the sort of services 
that exist outside of the USCP could help support the strategic kind of intelligence 
questions and operational intelligence questions that would be -- that are, | think, ones 
that we're asking today, which is is Congress still a target, is Congress and the Members, 
because of their policies, still drawing extremists on either side, and | think they 
need -- and "they," meaning the USCP, has to have visibility on that, has to understand 
what is happening. 

And they have data, really good data, but they don't have the analysts that -- since 
when | was there, they didn't have the number of analysts to support the deep analysis 
that has to happen with all of those thousands of -- 10,000 threats to members that came 
in over the transom last year alone. That's what's needed. 

And | think -- you know, those are really -- those are the key pieces, you know. 
And a program to keep them, meaning the analysts, well informed about what's 
happening in the department. So the marriage that we've built in, you know, that was 
built in my former employer was one where analysts were sitting with the investigators 
and built a very strong rapport, elevating the products. 

The goal that | had when | was there was that USCP would have co-branded 
materials with other members of the IC because we have such a unique perspective on 
what's happening. And that was -- that was the audacious goal that would've been a 
external kind of, you know, benchmark to show that, not only can our analysts do it, they 


did it to the same exacting degree that the IC requires. And we weren't there; hopefully 
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they're on that path now. 
Q I'm cognizant of the time, so my last question just is, is there anything | 
didn't ask you that you want to make sure you share with the committee -- entirely up to 


you, of course -- if there's something that you felt like you didn't get to say and you want 


to say it? 
A If | had to, I'll write to you. Does that make sense? 
Q- Oh, sure. 
A If | want to put it on -- in the paper, if it's something that | forget, because 


right now I'm kind of -- 

Q  Noworries. 

A _ --kind of shot. 

Q  No,Iknow. _ It's been -- you've been talking for a while, so | hope we got 
through most of it if not all of it. 

All right. Sol want to thank you, of course, Mr. Donohue, for sitting with us, 
taking this time with the informal interview before and now the transcribed interview. 
We're very, very much appreciative of your time. And that will end. 

Mr. Franz. Can we count on you to send us a copy of the transcript? 

HE. 3 So once it is prepared, | -- just check back in with me. There's a 
whole process that it needs to go through, so but check back in with me, and | will of 
course give it to you once we have it. 

Mr. Franz. Perfect. Thank you, everybody. Sorry to have to be so hasty. 


[Whereupon, at 5:00 p.m., the interview was concluded.] 
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